{"instruction": "You are an expert in event extraction. Please extract events from the input that conform to the schema definition. Return an empty list for events that do not exist, and return NAN for arguments that do not exist. If an argument has multiple values, please return a list. Respond in the format of a JSON string.", "schema": [{"event_type": "phishing", "trigger": true, "arguments": ["damage amount", "victim", "tool", "trusted entity", "attack pattern", "place", "attacker"]}, {"event_type": "discover vulnerability", "trigger": true, "arguments": ["vulnerable system", "common vulnerabilities and exposures", "supported platform", "time", "vulnerability", "vulnerable system version", "capabilities", "discoverer", "vulnerable system owner"]}, {"event_type": "patch vulnerability", "trigger": true, "arguments": ["vulnerable system", "patch number", "vulnerability", "supported platform", "releaser", "patch", "vulnerable system version", "time"]}, {"event_type": "ransom", "trigger": true, "arguments": ["attacker", "place", "victim", "attack pattern", "time", "payment method", "price", "damage amount", "tool"]}, {"event_type": "data breach", "trigger": true, "arguments": ["tool", "time", "attacker", "number of data", "compromised data", "damage amount", "purpose", "place"]}], "input": "The city has spent the past two weeks restoring online services disrupted by ransomware that held encrypted data hostage ."}
{"phishing": [], "discover vulnerability": [], "patch vulnerability": [], "ransom": [{"trigger": "disrupted", "arguments": {"attacker": "NAN", "place": "NAN", "victim": ["The city", "online services"], "attack pattern": "held encrypted data hostage", "time": "the past two weeks", "payment method": "NAN", "price": "NAN", "damage amount": "NAN", "tool": "ransomware"}}], "data breach": []}